Privacy Policy

Your Privacy Matters: Detailed Overview of Our Data Practices

Data Security
Table of Contents

Overview & Scope of the Privacy Policy

Introduction
At ChromeOS Readiness Tool, we are committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, process, store, and secure information from users of our software, in accordance with industry standards and applicable data protection regulations.

Scope
This policy applies to the deployment and use of the ChromeOS Readiness Tool, whether through Unified Endpoint Management (UEM) tools (Other Deployment Flow) or Active Directory environments (Enterprise Flow). The tool helps assess an organization's readiness to transition from Windows to ChromeOS by collecting system and application usage metadata from connected devices.

Data Collection & Usage

Types of Data Collected
During installation, we collect the company name, address, and optionally, the logo to register your organization and keep a record of service usage. If you choose a cloud-based storage option, the company name and logo (if provided) will also appear on your web dashboard for identification and personalization.

The data collectors are collecting the data mentioned below.

App Data
Process Start Date & Time – To calculate the application usage time
Process End Date & Time – To calculate the application usage time
Process ID – To identify the app instance
Process Name – To identify the application
Product Name – To identify the application (second layer)
Windows Title – To identify the application (third layer)

Device Data
Domain Name – To identify the domain the device belongs to
Machine Name – To identify the device
Device Model – To check the ChromeOS Flex readiness
Processor – To display in the web dashboard, on the device details
RAM Size – To display in the web dashboard, on the device details
Storage Info – To display in the web dashboard, on the device details
OS Info – To display in the web dashboard, on the device details

Peripheral Data
Device ID – To uniquely identify the device
Name – To identify the device model
Device Model – To check the ChromeOS Flex readiness
Device Type – To identify the device category (Printer, Scanner, Monitor, etc.)
Hardware ID – To identify the device model (second layer)
Manufacturer – To identify the device brand

Note:
No personally identifiable information (PII), such as usernames, passwords, documents, keystrokes, or mouse inputs, is collected. The data is limited to metadata required for readiness evaluation.

Use of Data
Collected data is used exclusively for generating readiness reports that assist IT administrators in evaluating which devices are suitable for ChromeOS migration.

No data is used for:
User behavior profiling
Advertising
Third-party analytics

Data Storage & Security

Storage Location
Data collected from client machines is:
A network-shared folder (Enterprise Flow)
A cloud storage service (Other Deployment Flow)
Report generation is done entirely on the administrator machine, and no data is transmitted to ChromeOS Readiness Tool servers.

Encryption & Protection
To ensure the protection of data during transmission and storage, the ChromeOS Readiness Tool adheres to industry-standard encryption practices.
In transit: All data transmitted over the internet is protected using Transport Layer Security (TLS).
At rest: Data stored by the ChromeOS Readiness Tool is encrypted using AES-256.

Security Measures
We apply multiple layers of security, including:
Asymmetric encryption using RSA public/private keys generated per installation
Role-based access control (NTFS permissions for network folders)
Enforced use of secure protocols for transmission

Data Control & Policy Governance

Data Sharing and Disclosure
We do not share any collected data with:
ChromeOS Readiness Tool developers or operators
External third parties or vendors
All data remains entirely within the customer's domain or cloud infrastructure.

Data Retention
Data is stored in the designated location and is retained until manually deleted by the customer's designated user.

Temporary files created on local machines are automatically removed.
Data stored in shared folders or cloud buckets will remain intact unless explicitly deleted by the customer.

User and Administrator Rights
IT administrators retain full access to all collected data and can delete data at their discretion.
End users do not have access to other users' data.

Data collection can be stopped by:
Uninstalling the Data Collector via GPO or UEM
Manually terminating data collecting processes

Children's Data
The ChromeOS Readiness Tool is designed for use by organizations and IT administrators and is not intended for individuals under the age of 13. We do not knowingly collect personal data from anyone under 13.

Policy Updates
We may update this policy periodically. All updates will be:
Communicated with customers via official channels
Available on the official ChromeOS Readiness Tool site